Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Password hash algorithm in UME, SAP security note 1897192

SAP Note 1897192

SAP security note 1897192, "Password hash algorithm in UME", is a note. Below are the SAP recommended solution and the affected software components.

Description

Solution

Update your AS Java to an SP or release in which the issue is fixed. See the "SP Patch Level" tab for details and available patches.

Reason and prerequisites

The UME hash algorithm for passwords has been updated.

CVSS

Score 1.4 Vector: AV:A/AC:H/AU:S/C:P/I:N/A:N

Affected components

  • SAP-JEECOR (7.00 to 7.00)
  • SAP-JEECOR (7.01 to 7.02)
  • SERVERCORE (7.10 to 7.10)
  • SERVERCORE (7.11 to 7.11)
  • SERVERCORE (7.20 to 7.20)
  • SERVERCORE (7.30 to 7.30)
  • SERVERCORE (7.31 to 7.31)
  • SERVERCORE (7.40 to 7.40)

Full note on SAP: SAP Support Launchpad note 1897192

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More